Setup guide
You need two things: the official WireGuard app and your
.conf file from the config generator.
Pick your platform below.
- Install WireGuard for Windows (or from the Microsoft Store).
- Open WireGuard → Add Tunnel → Import tunnel(s) from file, and pick your
.conf. - Select the tunnel and click Activate.
- Confirm on the status page or check your IP at a site like ipleak.net — it should show the tunnel, not your ISP.
- Install WireGuard from the Mac App Store.
- Open it (menu-bar icon) → Import Tunnel(s) from File → choose your
.conf. - Toggle the tunnel on from the menu-bar icon.
- macOS may ask to add a VPN configuration — allow it.
- Install WireGuard from the App Store.
- Easiest: on the config page we can show a QR code — in the app tap + → Create from QR code.
- Or AirDrop / save the
.confto Files, then + → Create from file or archive. - Toggle the tunnel on. iOS will ask to add a VPN configuration — allow it.
- Install WireGuard from Google Play (or F-Droid).
- Tap + → Import from file or archive and pick your
.conf(or scan a QR code). - Tap the tunnel to connect; grant the VPN permission when asked.
- Install the tools:
sudo apt install wireguard(Debian/Ubuntu) or your distro's package. - Save your config to
/etc/wireguard/dl.conf(root-only:sudo chmod 600). - Bring it up:
sudo wg-quick up dl· take it down:sudo wg-quick down dl. - Auto-start on boot:
sudo systemctl enable wg-quick@dl.
Split tunnel vs. everything
Your config routes all traffic through the tunnel
(AllowedIPs = 0.0.0.0/0, ::/0). To only route the private
network — leaving normal browsing on your own connection — change that line
to AllowedIPs = 10.8.0.0/24 before importing.
Kill switch
On desktop WireGuard, enable "Block untunneled traffic (kill-switch)" in the tunnel's settings so nothing leaks if the tunnel drops. On mobile, enable "Always-on VPN" in the OS VPN settings.